Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json)
Hash identifier: JOj5ZqtprpXQtKB2JDu8GldZGhljpHAIEcrsz7rc5aM=
Subject key identifier: D5:31:78:1D:18:98:77:6B:F2:81:53:05:ED:F6:65:90:72:86:58:37
Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Certificate serial: 3894479C0E41DB67D764CFE3B9060406048A14FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
Manifest number: 01CF
Signing time: Tue 28 Apr 2026 22:52:41 +0000
Manifest this update: Tue 28 Apr 2026 22:47:41 +0000
Manifest next update: Sat 02 May 2026 04:01:41 +0000
Files and hashes: 1: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: mgQ6n6qbaCMbKjW2V2VZyMZ/C74fXguNwoCbuSGF3MQ=)
2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: tRsPlZLA6VOm/F33/+1UcaqluCjw4Axl5KiSk7qJGjQ=)
3: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: mEYaAaFx/DjhEKlkpDPeOM4TkC3ENPq2BzujZ3CjRcE=)
4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: keLbCd7ZsbkB2/h/TV22jtBoEws1VOw0OydIvEwteiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:94:47:9c:0e:41:db:67:d7:64:cf:e3:b9:06:04:06:04:8a:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Validity
Not Before: Apr 28 22:47:41 2026 GMT
Not After : May 2 04:01:41 2026 GMT
Subject: CN=D531781D1898776BF2815305EDF6659072865837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:9b:dd:7a:46:b8:09:ba:55:99:c3:37:56:
78:04:68:02:ed:0b:eb:d2:02:84:70:4f:07:c9:31:
ab:af:e0:1f:95:a3:39:9c:4d:12:75:39:bf:4e:37:
22:ca:ca:9d:84:40:4e:1a:11:9e:3f:64:e1:32:d7:
b0:eb:3c:60:df:0d:5b:2f:4e:84:c0:40:fa:33:c4:
16:e3:14:77:bf:8b:b8:7c:b6:18:ba:92:fe:47:2c:
1d:16:ad:e4:94:34:a3:14:09:75:aa:57:a1:91:29:
89:43:6a:67:6d:7d:13:e3:40:35:a0:5c:72:7e:86:
e6:8c:be:bd:08:7d:dd:0e:35:f2:af:51:29:bd:e3:
c2:8d:be:64:ae:c4:7f:ac:60:6d:af:d6:d3:3f:9b:
b3:fb:5d:6c:e5:bf:d7:16:a3:29:c9:da:47:0b:0a:
36:87:22:ae:b1:e4:4c:f6:ef:cb:02:f4:df:82:6e:
dc:a7:d2:8f:d8:84:d9:76:a9:f5:a8:08:74:23:9b:
28:2c:0a:c0:63:cb:01:f6:9e:f6:74:f2:53:e1:92:
78:04:36:14:75:a8:5c:ff:af:12:ab:4f:80:61:49:
a6:a3:8e:c3:8e:95:eb:8b:79:d8:06:ce:b3:6c:d1:
45:b4:42:43:cf:5e:5a:de:da:19:a5:f4:30:ce:e9:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:31:78:1D:18:98:77:6B:F2:81:53:05:ED:F6:65:90:72:86:58:37
X509v3 Authority Key Identifier:
keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:fd:1d:80:08:71:a2:88:09:7c:2d:be:1f:80:3c:fa:79:
09:4e:b6:9f:ea:cd:b8:eb:89:ce:30:a2:9a:cd:34:54:b3:e5:
de:e8:69:32:82:64:85:58:7a:73:ff:f7:12:44:6e:e0:c2:69:
2b:98:00:da:77:61:ae:d8:59:a1:3a:2f:b6:c4:bf:be:02:5b:
b6:db:fb:4e:70:be:80:93:91:ee:2a:10:e1:0d:06:66:e0:90:
7b:1c:cd:b6:cf:de:b1:3b:75:62:75:e4:4c:8a:81:5a:04:61:
af:05:9b:d0:d2:4d:c9:12:aa:76:15:4a:5d:5f:0e:c0:d8:61:
88:f8:58:e1:a1:85:4f:45:15:b4:d0:15:20:06:b7:d4:c1:99:
90:b8:43:f2:e8:16:c0:80:b9:c3:20:b4:4d:d2:84:de:ff:85:
b3:93:75:b8:fa:0a:4e:fd:ec:7e:56:11:5f:7f:80:b0:13:bb:
3d:9f:17:57:1f:4f:db:7a:75:98:e5:08:f6:f1:06:fb:0b:e3:
f1:11:73:2f:8f:47:ec:93:72:5f:f9:31:b6:d7:a5:19:c9:ca:
37:fe:03:d9:8c:c9:c8:0e:61:74:bc:d3:5a:25:24:6b:37:96:
9a:36:17:1f:44:ef:21:c3:bc:dc:c3:b7:01:2a:31:88:ec:a1:
19:c7:7a:4a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOJRHnA5B22fXZM/juQYEBgSKFPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5
MEU4QjdBRDAeFw0yNjA0MjgyMjQ3NDFaFw0yNjA1MDIwNDAxNDFaMDMxMTAvBgNV
BAMTKEQ1MzE3ODFEMTg5ODc3NkJGMjgxNTMwNUVERjY2NTkwNzI4NjU4MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Qpvdeka4CbpVmcM3VngEaALt
C+vSAoRwTwfJMauv4B+VozmcTRJ1Ob9ONyLKyp2EQE4aEZ4/ZOEy17DrPGDfDVsv
ToTAQPozxBbjFHe/i7h8thi6kv5HLB0WreSUNKMUCXWqV6GRKYlDamdtfRPjQDWg
XHJ+huaMvr0Ifd0ONfKvUSm948KNvmSuxH+sYG2v1tM/m7P7XWzlv9cWoynJ2kcL
CjaHIq6x5Ez278sC9N+Cbtyn0o/YhNl2qfWoCHQjmygsCsBjywH2nvZ08lPhkngE
NhR1qFz/rxKrT4BhSaajjsOOleuLedgGzrNs0UW0QkPPXlre2hml9DDO6RZhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1TF4HRiYd2vygVMF7fZlkHKGWDcwHwYDVR0j
BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC
MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4
QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz
YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF
Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE98/R2ACHGiiAl8Lb4fgDz6eQlOtp/qzbjr
ic4woprNNFSz5d7oaTKCZIVYenP/9xJEbuDCaSuYANp3Ya7YWaE6L7bEv74CW7bb
+05wvoCTke4qEOENBmbgkHsczbbP3rE7dWJ15EyKgVoEYa8Fm9DSTckSqnYVSl1f
DsDYYYj4WOGhhU9FFbTQFSAGt9TBmZC4Q/LoFsCAucMgtE3ShN7/hbOTdbj6Ck79
7H5WEV9/gLATuz2fF1cfT9t6dZjlCPbxBvsL4/ERcy+PR+yTcl/5MbbXpRnJyjf+
A9mMycgOYXS801olJGs3lpo2Fx9E7yHDvNzDtwEqMYjsoRnHeko=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:51 2026 by rpki-client